CVE-2025-52194 — Stack-based Buffer Overflow in Project Libsndfile

CWE-121 — Stack-based Buffer OverflowCWE-120 — Classic Buffer Overflow6 documents6 sources
Severity
7.5HIGHNVD
EPSS
0.2%
top 58.66%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
Libsndfile Project LibsndfileMsrc Azl3 Libsndfile 1.2.2-3 ON Azure Linux 3.0Msrc Azl3 Libsndfile 1.2.2-4 ON Azure Linux 3.0+2 more
Timeline
PublishedAug 21

Description

A buffer overflow vulnerability exists in libsndfile version 1.2.2 and potentially earlier versions when processing malformed IRCAM audio files. The vulnerability occurs in the ircam_read_header function at src/ircam.c:164 during sample rate processing, leading to memory corruption and potential code execution.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages5 packages

Patches

Patch: github.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-3w6g-vv96-4ph6: A buffer overflow vulnerability exists in libsndfile version 1↗2025-08-21
▶
OSV
CVE-2025-52194: A buffer overflow vulnerability exists in libsndfile version 1↗2025-08-21
▶
CVEList
CVE-2025-52194: A buffer overflow vulnerability exists in libsndfile version 1↗2025-08-21
▶

📋Vendor Advisories

2
Red Hat
libsndfile: buffer overflow when processing crafted IRCAM audio files↗2025-08-21
▶
Microsoft
A buffer overflow vulnerability exists in libsndfile version 1.2.2 and potentially earlier versions when processing malformed IRCAM audio files. The vulnerability occurs in the ircam_read_header funct↗2025-08-12
▶